Lucene search
HistoryDec 12, 2022 - 1:15 p.m.
CVE-2022-38656
hcl commerce
elasticsearch
remote attacker
denial of service attack
administrative changes
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
72.9%
HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes.
Affected configurations
Node
hcltechswhcl_commerceRange9.1.8–9.1.11
Related
cvelist
cvelist
prion
prion
Design/Logic Flaw
2022-12-12 13:15:00
cve
cve
CVE-2022-38656
2022-12-12 13:15:14
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
72.9%
Related for NVD:CVE-2022-38656